Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/09VKh0q528ODvZV9zCmWyO25cgQ.roa
File: 09VKh0q528ODvZV9zCmWyO25cgQ.roa (raw, json)
Hash identifier: SkK8yKOGdCu+/5oLszuSaIk7Z7qjayLjAt5dQHRJ7kA=
Subject key identifier: D3:D5:4A:87:4A:B9:DB:C3:83:BD:95:7D:CC:29:96:C8:ED:B9:72:04
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 486A9641
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/09VKh0q528ODvZV9zCmWyO25cgQ.roa
Signing time: Sat 01 Jan 2022 03:00:30 +0000
ROA not before: Sat 01 Jan 2022 03:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50509
IP address blocks: 5.188.236.0/23 maxlen: 23
146.185.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214944833 (0x486a9641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3d54a874ab9dbc383bd957dcc2996c8edb97204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:27:ac:b8:9b:c5:90:76:e8:a7:ad:f0:72:
22:c6:c8:bf:bb:85:73:e6:61:b1:f5:98:5f:c4:67:
96:7d:da:8a:2a:0d:32:85:34:5c:df:d4:80:38:df:
8a:f7:6d:5a:30:fb:1c:cd:f3:bd:0e:d8:f9:d1:90:
f2:86:ca:c0:cf:c3:d5:44:ea:20:b7:e1:88:b6:72:
17:37:6f:3d:ad:30:5e:5a:ea:43:da:ea:45:9b:8c:
66:01:dc:1b:9a:1e:f7:40:c0:7d:6f:09:23:93:fc:
3d:92:10:98:1d:86:07:f6:13:c8:f4:1e:32:c2:32:
78:a4:28:1d:f4:d6:10:71:de:4f:5f:80:d6:4b:70:
ec:0e:47:2a:b8:bb:5d:d3:bf:b4:ba:76:03:0f:ab:
63:25:32:55:7b:bc:92:1c:2e:98:60:cf:2a:81:f0:
a2:77:fa:99:a9:bc:1a:c1:9d:73:1e:49:c9:8d:ac:
1a:3b:9d:0f:63:92:38:d9:0a:c9:49:07:75:7a:3a:
96:bd:83:08:79:b1:c5:ab:19:e2:25:76:b8:d3:27:
25:cc:c8:b3:65:52:f9:a5:65:0d:9a:bb:5a:94:ef:
e4:01:15:60:bb:37:51:79:57:2b:78:6c:e8:2a:4f:
42:da:89:60:41:1b:c5:b3:83:be:48:f3:e6:1c:81:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D5:4A:87:4A:B9:DB:C3:83:BD:95:7D:CC:29:96:C8:ED:B9:72:04
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/09VKh0q528ODvZV9zCmWyO25cgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.236.0/23
146.185.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:62:1e:15:08:c5:67:93:c4:1f:5e:b6:84:e2:48:40:8b:3c:
3b:56:42:6f:80:46:62:34:e4:58:02:e3:cc:ff:8f:97:cd:85:
a3:9f:60:a6:72:bb:4a:74:6d:92:ab:90:ff:c0:38:57:d6:ea:
78:fa:98:87:67:d2:cb:e6:c6:76:c3:e9:dc:c9:52:2d:e8:f1:
58:7d:d7:47:71:2a:6f:ae:83:d3:26:83:19:d6:83:5b:27:e7:
9b:39:d8:96:c5:1e:48:74:1c:0a:f9:0f:f8:12:83:b6:e7:14:
ab:b0:48:e5:41:f3:bc:ca:cc:8d:3c:fd:21:8b:f9:38:9d:38:
d1:92:0d:e3:f7:30:b6:db:b3:54:c1:56:e7:05:75:51:db:16:
ed:16:9e:a1:8f:7f:5f:61:de:fb:be:03:99:05:20:4a:94:1b:
6c:d0:f7:d0:07:90:47:07:98:8a:8f:6a:10:e3:7d:eb:e0:64:
04:93:f4:1f:71:3f:1b:4a:e1:23:5d:65:47:c0:a9:f6:05:de:
94:f9:36:a8:18:98:74:71:0c:79:db:59:e5:5f:71:cd:b5:79:
92:9c:2e:81:b9:36:19:81:8b:86:44:fd:cd:ab:63:1c:df:42:
00:c4:7a:0f:e6:cd:08:c9:56:83:28:44:e0:a2:5a:9b:5f:a6:
1c:c9:f6:d8
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIESGqWQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWFhOGEwYTVmZGZkNjk4ZTEwNGJlMzZhMmFlZWM4MTNhZWNhMDcxMB4XDTIyMDEw
MTAzMDAzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDNkNTRhODc0YWI5
ZGJjMzgzYmQ5NTdkY2MyOTk2YzhlZGI5NzIwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJSKJ6y4m8WQduinrfByIsbIv7uFc+ZhsfWYX8Rnln3aiioN
MoU0XN/UgDjfivdtWjD7HM3zvQ7Y+dGQ8obKwM/D1UTqILfhiLZyFzdvPa0wXlrq
Q9rqRZuMZgHcG5oe90DAfW8JI5P8PZIQmB2GB/YTyPQeMsIyeKQoHfTWEHHeT1+A
1ktw7A5HKri7XdO/tLp2Aw+rYyUyVXu8khwumGDPKoHwonf6mam8GsGdcx5JyY2s
GjudD2OSONkKyUkHdXo6lr2DCHmxxasZ4iV2uNMnJczIs2VS+aVlDZq7WpTv5AEV
YLs3UXlXK3hs6CpPQtqJYEEbxbODvkjz5hyB8JkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTT1UqHSrnbw4O9lX3MKZbI7blyBDAfBgNVHSMEGDAWgBTqqooKX9/WmOEE
vjairuyBOuygcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZxcUtDbF9mMXBqaEJMNDJvcTdzZ1Ryc29IRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvMjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8x
LzA5VktoMHE1MjhPRHZaVjl6Q21XeU8yNWNnUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
MjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8xLzZxcUtDbF9mMXBq
aEJMNDJvcTdzZ1Ryc29IRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAQW87AMEAJK53jANBgkqhkiG9w0B
AQsFAAOCAQEAimIeFQjFZ5PEH162hOJIQIs8O1ZCb4BGYjTkWALjzP+Pl82Fo59g
pnK7SnRtkquQ/8A4V9bqePqYh2fSy+bGdsPp3MlSLejxWH3XR3Eqb66D0yaDGdaD
WyfnmznYlsUeSHQcCvkP+BKDtucUq7BI5UHzvMrMjTz9IYv5OJ040ZIN4/cwttuz
VMFW5wV1UdsW7RaeoY9/X2He+74DmQUgSpQbbND30AeQRweYio9qEON96+BkBJP0
H3E/G0rhI11lR8Cp9gXelPk2qBiYdHEMedtZ5V9xzbV5kpwugbk2GYGLhkT9zatj
HN9CAMR6D+bNCMlWgyhE4KJam1+mHMn22A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org